What is Splice?
SPLICE provides access control, behavioral profiling, Intrusion Detection, and forensic audit trail of all OT control network traffic. SPLICE allows you to take back control over insecure API's. Vulnerability Shielding techniques are used to encapsulate and strengthen insecure API's. Powerful machine learning algorithms and deep packet tag analysis are used to detect anomalous communication between OT devices.
Cybersplice for OT security and IoT security: the logical alternative to air-gaps
What is Splice-net?
SPLICE-NET is carrier independent, allowing sensor networks to expand across carrier footprints, and allowing for high availability by rerouting overlay traffic through alternate carriers.
Customers remain in full control of encryption keys and therefore fully in charge of their sensor networks, even where traffic traverse hostile or untrustworthy networks.
Quick intro
Applications
SCADA
SPLICE enables sensitive real world interfacing devices to co-exist securely inside existing IT networks.
ICS
SPLICE overcomes device and controller vulnerabilities by building vulnerability shielding, authentication, authorisation and access controls into the network layer.
Embedded
SPLICE logically isolates targets in an encrypted overlay network for centralised profiling, segregation and Intrusion Detection.
I-IoT
With SPLICE there is no need to touch the actual equipment or code.
Vulnerability Shielding
IT security practices do not always translate well for OT security or IoT security purposes. For various reasons, it may not be viable to patch vulnerabilities in HMI's and PLC's.
SPLICE provides a way to mitigate these vulnerabilities through Vulnerability Shielding by injecting authentication code into the existing communication flow. When a sensitive function is accessed, SPLICE takes over from the normal application flow and requests OTP or password verification before forwarding the request through to the HMI. Using Vulnerability Shielding, Role Based Access Control (with or without two factor authentication) can be built into legacy applications without touching the application code. Vulnerability Shielding works with both legacy and AJAX/websockets based applications.